Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) 1-2-1

Requirement

In addition to the controls in ECC subdomain 1-5, cybersecurity risk management methodology must include at least the following:

Sub-Controls

1-2-1-1

Requirement: Conducting a cybersecurity risk assessment on critical systems at least once annually.

1-2-1-2

Requirement: Creating a cybersecurity risk register for critical systems, and reviewing it at least once every month.

References

  1. ECC – 2:2024 equivalent: 1-5

Need help putting this into practice? See our NCA CSCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo

See LakeRidge in action.

Loading the booking calendar…